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JUDGE SAMUEE CHUNG 

2 

3 


Noted for 8:30 a,m. Sept, 5, 2018 

4 

5 

6 

SUPERIOR COURT OF WASHINGTON 

7 

COUNTY OF KING 

8 

VIX TECHNOFOGY USA, Inc., 

No. 18-2-19467-9 

9 

Plaintiff, 

RESPONSE IN OPPOSITION TO 

10 

V. 

MOTION FOR TEMPORARY 

RESTRAINING ORDER AND 

11 

CENTRAF PUGET SOUND REGIONAF 
TRANSIT AUTHORITY (dba SOUND 

PREEIMINARY INJUNCTION 

12 

TRANSIT) and KEVIN WALEACE, 


13 

Defendants. 


14 



15 

I. INTRODUCTION AND REEIEF REQUESTED 

16 

Vix Teehnology must prove that the Sound Transit reeords at issue are both exempt from 

17 

disclosure and elearly not of public interest. It has not done so. In fact, the requested software 

18 

applications encompass fare enforeement procedures which are supposed to prevent diserimination. 

19 

and which vest maehines with the “use of diseretion” that onee was exercised by enforcement 

20 

officers. The publie has an interest in knowing how Sound Transit enforces fare requirements on 

21 

buses and trains, and cannot learn the whole story without the applieations used on fare deviees. 

22 

Beeause Vix Teehnology has not and cannot meet the injunetion standard under the Public Records 

23 

Act, RCW 42.56.540, the motion should be denied. 

24 
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IL 

This response relies upon the reeord of the case and the declarations of Kevin Wallace and 
Katherine George, and attachments thereto. 

III. STATEMENT OE EACTS 

Kevin Wallace is a transit user. Declaration of Kevin Wallace, ^2. On January 13, 2018, he 
made a public records request to Sound Transit for all “guidebooks, policy manuals and similar 
materials regularly provided to persons designated as fare enforcement monitors by Sound Transit 
under RCW 81.112.210.” Wallace Dec., T13, Ex. A, p. 1. In response, Sound Transit produced 13 
“standard operating procedures” for fare enforcement officers. Wallace Dec., These documents 
outlined procedures for basic on-board train inspections, proof of payment inspection techniques, 
writing and issuing warnings and citations, filing a third-degree theft case, handling juveniles, 
confiscating university and college passes, fare inspection rules, and non-discrimination. Id. 

One of the produced documents, SOP-SEC 10-21, explains “the basics of inspections where 
proof of payment is presented in the form of an ORCA card.” Wallace Dec., T15 and Ex. B, p. 1. It 
defines an ORCA card as “a plastic card that has an electronic chip that is used for fare payment.” 
Id. The document says: “If the ORCA card has an E-purse and is not tapped or has no value loaded 
on it, this constitutes a violation of the Proof of Payment section of RCW 81.112.220,” punishable 
by a $124 fine. Ex. B, pp. 1-2. It directs the enforcement officer to scan the passenger’s ORCA 
Card with a “handheld ORCA App to determine if the card was tapped prior to boarding.” Ex. B, p. 
2. According to SOP-SEC 10.21, the ORCA Inspection App is used on Eink light rail and Sounder 
commuter trains to check ORCA cards for payment. Ex. B, p. 3. The document cautions: “Not all 
passengers understand the ORCA system,” and directs officers to explain how it works rather than 
simply say, “You did not tap.” Id. 
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Another document produced by Sound Transit, SOP-SEC 10-20, “outlines how Fare 

Inspections are monitored to assure discrimination does not occur.” Wallace Dec., ^6, Ex. C, p. E 

It states, “Use of discretion is further outlined in SOP-SEC 10-07.” Id. However, Sound Transit 

did not produce SOP-SEC 10-07 in response to Mr. Wallace’s request for fare enforcement policies 

and guidebooks. Wallace Dec., and Ex. A., pp. 3 and 6. When asked about the missing 

document, Sound Transit Project Coordinator Eeigh Tennison said in an April 25, 2018 email; 

We have met with security staff and 10-7 is no longer included in the SOPs. It refers 
to a process used when fare enforcement officers manually issued tickets. This 
process is now done automatically through the hand held devices and therefore 10-7 
is no longer included. 

Wallace Dec., Ex. A, p. 6 (italics added). 

Mr. Wallace was concerned that officer discretion had been replaced with machines acting 

“automatically.” Wallace Dec., T19. This was especially alarming because, according to the 

procedures, people can be charged with theft based on information on the hand-held machines. Id. 

In order to learn how the hand-held devices “automatically” exercised the discretion that 

was previously vested in fare enforcement officers, Mr. Wallace made another records request on 

May 5, 2018 for the software applications referenced in the enforcement procedures. Wallace Dec., 

TllO and Ex. D, p. 1. Specifically, he asked for: 

A copy of the latest version of each of the following applications used on Fare 
Enforcement handheld devices: 

- Orca Inspection 

- Officer Android 


20 


Id. On May 11, 2018, he received the following response from Ms. Tennison: 


21 

22 

23 

24 


DRAFT-for your approval. This is due today or Monday at the latest. We don't have 
an "officer android" app. The ORCA Inspection is an android app. 


This will acknowledge your request for a copy of the latest version of each of the 
following applications used on fare enforcement handheld devices: 

-ORCA Inspection 
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-Officer Android 


We received your request on May 7, 2018. 

The application used to scan ORCA cards is called "ORCA Inspection." It is an 
Android version. We are unable to provide you with this app because it is exempt 
under ROW 42.56.270(1). This eompletes our response and we will close this 
request fde. 

Ex. D, pp. 1-2. Although the first word was “DRAFT,” Mr. Wallace understood the response to be 

official. Wallace Dec., Til 1. The citation to an exemption, and the closing of the request, indicated 

that Sound Transit had done legal researeh and formed a position against disclosure. Id. 

Later that day, Mr. Wallace replied in pertinent part as follows: 

1 appeal. RCW 42.56.270(1) only exempts disclosure of software when such 
disclosure "would produce private gain and public loss" which is not the case here — 
the released records are being made available to the public. They are being requested 
in the interest of increased transparency around the fare enforcement process, not for 
private gain of any kind. On 4/25, in response to request PD18-030, you indieated to 
me that fare enforcement policy SOP-SEC 10-07 has been superseded by a process 
in the application that 1 am now requesting. Fare enforcement policy is a matter of 
public record, even when it's embodied in software. 

Ex. D, pp. 2-3. 

On May 14, 2018, Sound Transit paralegal Q’Deene Nagasawa told Mr. Wallace that Ms. 
Tennison’s email was sent inadvertently and that her own “initial review” suggested that RCW 
42.56.270(1) did not apply. Wallace Dec., ^\2 and Ex. D, p. 3. However, she stated she needed 
more time “to review.” Id. Final results of that review were never communicated to Mr. Wallace. 
Wallace Dec., T115. Instead, Sound Transit put the request on hold while waiting for Vix 
Technology to bring this action. Wallace Dec., ^^113-14. Then, on August 13, 2018 - three months 
after sending inconclusive messages about exemption claims - Sound Transit told Mr. Wallace that 
it would not take action on his request due to this lawsuit. Wallace Dec., T114 and Ex. D, p. 8. 

Mr. Wallace testified: 
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I believe the general public, like me, has an interest in the requested records. If 
humans were still carrying out Sound Transit’s ‘use of discretion’ procedures, 
nobody would question that they should be public. Software, in general, is a way of 
codifying procedures. The ORCA Inspection and Officer Android software 
applications are carrying out procedures that used to be performed by humans. I 
believe it is important for the public to know whether these applications are actually 
preventing discrimination in fare enforcement. More generally, taxpayers and transit 
riders like me are interested in how enforcement by machines works. 

I’m a software engineer myself I disagree that releasing software, by itself, makes it 
insecure. If the software is competently written and if security keys are redacted, 
confidential financial information would be protected. 

Wallace Dec., 1(1116-17. 

Vix Technology, formerly called ERG Transit Systems, has a $39 million contract with 
Sound Transit and six other transit agencies to develop, operate and maintain a regional fare 
coordination system. Declaration of Katherine George, Ex. A, p. 1. Of that amount, Sound 
Transit’s share is $6.8 million. Id. There was no competition for the contract. George Dec., Ex. B, 
p. 1. Sound Transit received two proposals, but determined that “only one firm” - Vix Technology 
- met requirements of the contract proposal. Id. 

IV. STATEMENT OE ISSUE 

The issue is whether to enjoin disclosure of software applications pursuant to RCW 
42.56.540 when the applications are public records containing fare enforcement procedures of 
interest to the public, when the plaintiff appears to have no competitors capable of exploiting the 
information, and when no specific exemption applies. 

V. AUTHORITY 

“Under the Public Records Act (PRA), public records may be withheld only ‘in accordance 
with a statute that exempts or prohibits disclosure in whole or in part of specific information or 
records.’ " Lyft Inc. v. City of Seattle, 190 Wn.2d 769, 111 (2018), oyioimg Progressive Animal 
Welfare Society v. Univ. of Wash., 125 Wn.2d 243, 251-52 (1994) (“FAWS’f The PRA “begins 
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with a mandate of full disclosure of public records; that mandate is then limited only by the precise, 

specific, and limited exemptions which the Act provides.” Lyft at 778, quoting PAWS, 125 Wn.2d at 

258. See also RCW 42.56.070(1) (requiring each agency to make available all public records 

unless they fall within specific exemptions of the PRA “or other statute which exempts or prohibits 

disclosure of specific information or records”). Here, it is not disputed that the software 

applications at issue are public records as defined by RCW 42.56.010. 

Vix Technology brought this “reverse” PRA action under RCW 42.56.540, which states: 

The examination of any specific public record may be enjoined if, upon motion and 
affidavit by.. .a person who is named in the record or to whom the record specifically 
pertains, the superior court.. .finds that such examination would clearly not be in the 
public interest and would substantially and irreparably damage any person, or would 
substantially and irreparably damage vital governmental functions. 

To obtain an injunction, Vix Technology must show “that a specific exemption applies and that 

disclosure would not be in the public interest and would substantially and irreparably damage a 

person or a vital government interest.” Lyft, 190 Wn.2d at 786, citing Soter v. Cowles Publishing 

Co., 162 Wn.2d 716, 757 (2007) and Morgan v. City of Federal Way, 166 Wn.2d 747, 756-77 

(2009). Thus, even if this Court found that an exemption applies (which is not the case), it would 

not be enough. Lyft at 786. Neither the exemption test nor the public interest test is met here. 

A. The Software Applications Are Not Exempt . 

Vix Technology asserts three exemptions from disclosure. RCW 42.56.270(11) is the most 
easily dispensed. Vix Technology contends that the applications are “trade secrets” protected under 
RCW 42.56.270(11). But that statute, on its face, applies only to health care records . It protects: 


21 

22 

23 

24 


Proprietary data, trade secrets, or other information that relates to: (a) A vendor's 
unique methods of conducting business; (b) data unique to the product or services of 
the vendor; or (c) determining prices or rates to be charged for services, submitted by 
any vendor to the department of social and health services or the health care 
authority for purposes of the development, acquisition, or implementation of state 
purchased health care as defined in RCW 41.05.011. 
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RCW 42.56.270(11) (italics added.) The software applications were submitted to Sound Transit, 
not the Department of Social and Health Services or the Health Care Authority, and therefore are 
not subject to the exemption. Id. 

To argue otherwise is to make half of the statute superfluous, contrary to principles of 
statutory construction. Courts give effect to all the language in a statute and harmonize all its 
provisions. Ockerman v. King County Dep’t of Dev. & Envt’l Servs., 102 Wn. App. 212, 216 
(2000). The plaintiffs interpretation would strip the phrase “submitted by any vendor to the 
department of social and health services or the health care authority for purposes of the 
development, acquisition, or implementation of state purchased health care as defined in RCW 
41.05.on” of any effect. RCW 42.56.270(11). It also would violate RCW 42.56.030, which 
requires narrow construction of PRA exemptions to promote full disclosure “and to assure that the 
public interest will be fully protected.” RCW 42.56.030. See also Bonamy v. City of Seattle, 92 
Wn. App. 403, 408-409 (1998) (courts should view with caution any interpretation which frustrates 
the PRA purpose of disclosure). 

Vix Technology is interpreting RCW 42.56.270(11) as a general exemption for trade secrets 
held by any agency. This is wrong. The Washington Supreme Court recently affirmed that no 
provision of the PRA exempts trade secrets from disclosure . Z.y/i, 190 Wn.2d at 780. Rather, trade 
secrets are addressed in the Uniform Trade Secrets Act (UTSA), which “was enacted to subsume 
claims of civil liability for misappropriation of trade secrets.” Id., citing RCW 19.108.900(1). The 
Supreme Court said: “The UTSA contains no specific exemption of trade secrets from public 
disclosure laws.” Lyft at 780. The Court further explained that “misappropriation” necessarily 
involves a record acquired under “a duty to maintain its secrecy,” and that a public agency cannot 
owe such a legal duty . Lyft at 787, citing RCW 19.108.010(2)(b)(ii), WAC 44-14-06002(1) (“Any 


JOHNSTON GEORGE LLP 
1126 JJ^Ave., Ste307 
Seattle, WA 98122 
Phone 206 832-1820 


OPPOSITION TO PRELIMINARY INJUNCTION - 7 





1 


agency contract regarding the disclosure of records should recite that the [PRA] controls”), and 
Spokane Police Guild v. Liquor Control Bd., 112 Wn.2d 30, 40 (1989) (“[PJromises cannot override 
the requirements of the disclosure law”). In sum, RCW 42.56.270(11) is not an exemption for trade 
secrets submitted to Sound Transit, and no such exemption exists. 

B. RCW 42.56.270(1) Also Does Not Apply . 

Vix Technology also invokes RCW 42.56.270(1), which protects the following “financial, 

commercial, and proprietary information”: 

Valuable formulae, designs, drawings, computer source code or object code, and 
research data obtained by any agency within five years of the request for disclosure 
when disclosure would produce private gain and public loss. 

(italics added). Vix Technology’s entire argument is that the requested applications constitute 

“computer source code or object code” received by Sound Transit within the past five years, and 

that a private party may invoke the exemption. Motion, pp. 9-10. There was no argument that 

“disclosure would produce private gain and public loss.” Id. Nor were the records submitted in 

camera to establish the extent to which sensitive “source code or object code” is implicated, and 

whether redactions of sensitive details are possible. RCW 42.56.210(1) (exemptions are 

inapplicable to the extent that information threatening privacy interests can be deleted). The 

plaintiffs cursory treatment of this exemption falls far short of proving it applies here. 

Vix Technology argued, in support of a different exemption claim, that “public loss” would 

result from disclosing the ORCA Inspection App because it allows transit operators to adjust values 

on ORCA Cards through interaction with “confidential customer (rider) information.” Motion, pp. 

8-9. The fear is that hackers could “reverse engineer how to fraudulently add and subtract money 

or fare products to individual ORCA fare cards.” Motion, p. 12. But this ignores that Sound 

Transit can redact security keys to guard against such risks. Moreover, only one of the two 
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applications purportedly could expose confidential rider information. Vix Technology did not 
establish any risk of public loss from disclosure of Officer Android. 

As for private gain, Vix Technology makes the bare assertion that disclosure “would 
substantially injure Vix’s competitive position by eroding its trade secrets, and allowing its 
competitors to understand exactly how Vix delivers the services it does.” Motion, p. 11. But there 
is no evidence that Vix has any competitors, let alone that such competitors are maneuvering to 
“reverse engineer” agency-leased software so as to steal purported secrets. In fact, Sound Transit 
proclaimed that only one other company sought Vix’s contract, and was not qualified. ^ In sum, Vix 
has not proven that disclosure of the applications would cause private gain and public loss, 
particularly with respect to Officer Android. Therefore, ROW 42.56.270(1) does not apply. 

C. RCW 42.56.420(4) Also Does Not Apply . 

Finally, Vix Technology invokes the security exemption, RCW 42.56.420(4), without 

quoting the full statute and without identifying any specific information fitting within its narrow 

scope. Motion, pp. 8-9. The statute protects: 

Information regarding the public and private infrastructure and security of computer 
and telecommunications networks, consisting of security passwords, security access 
codes and programs, access codes for secure software applications, security and 
service recovery plans, security risk assessments, and security test results to the 
extent that they identify specific system vulnerabilities, and other such information 
the release of which may increase risk to the confidentiality, integrity, or availability 
of security, information technology infrastructure, or assets. 

RCW 42.56.420(4) (italics added). Vix does not assert that the applications themselves contain the 

specific types of information covered, i.e., security passwords, security access codes, access codes 

for security software applications, security and service recovery plans, security risks assessments, or 

security test results that “identify specific system vulnerabilities.” Id.', Motion, p. 8. Rather, Vix 


1 This may explain why Vix reportedly has similar contracts “across the world.” Motion, p. 3. 
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argues that one of the applieations, ORCA Inspection, interacts with other computer systems that 
contain “system security protocols.” Motion, p. 8. This vague and extenuated connection simply 
does not fall within the exemption. Mr. Wallace is not requesting the “system security protocols” 
in the “back-office computer systems” that transit operators interact with when adjusting ORCA 
card values. Rather, he requests only the applications themselves, and expects that - as products of 
a $39 million contract - they are written competently enough to be secure. 

Moreover, the motion fails to identify any specific security information associated with 
Officer Android. With respect to the ORCA Inspection App, Vix again overlooks the possibility of 
redaction. There is no evidence of any attempt by Sound Transit or Vix Technology to delete 
whatever unidentified information might provide access to “back-office computer systems.” Mr. 
Wallace is not interested in security keys. Under RCW 42.56.210(1), the exemption does not apply 
if the information warranting protection can be redacted. In sum, the vague arguments about one 
application’s “interaction” with computers, without addressing redaction of whatever access codes 
or security keys might permit access to security information, fall far short of establishing that the 
security exemption applies. 

D. The Public Has An Interest in the Requested Records . 

Even if Vix Technology had established that an exemption applies, which it did not, the 
motion still should be denied because of the compelling public interest in Sound Transit’s fare 
enforcement procedures. The applications are used to check ORCA cards for payment, which can 
lead to civil fines and theft charges. Thus, their fairness and effectiveness is important to the 
dignity and liberty of transit riders, while also affecting the financial soundness of the public bus 
and train system. 
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Importantly, Mr. Wallace’s prior records request revealed that the applications contain fare 


enforcement procedures; that is, they replaced the “use of discretion” procedure which previously 
was carried out by humans. The former procedure was supposed to prevent discrimination in fare 
enforcement. Without access to the applications, the public cannot ascertain whether machines are 
preventing discrimination as effectively as humans did. This is a matter of public interest 
precluding an injunction under RCW 42.56.540. 

VI. CONCLUSION 

For the foregoing reasons, the motion should be denied. 


I certify that this memorandum contains 3,145 words, in compliance with the Local Civil Rules. 
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James Niemer 
Sound Transit 
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Seattle, WA. 98104 

lames .niemer @ soundtransit.org 
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